May 15, 2025 By Bill Toulas
Nova Scotia Power confirms it suffered a data breach after threat actors stole sensitive customer data in a cybersecurity incident discovered last month.
Nova Scotia Power, a subsidiary of Emera Inc., is a significant utility in Canada. It serves over 500,000 residential, commercial, and industrial customers in Nova Scotia, holding 95% of the market share.
It generates over 10,000 GWh of energy annually, distributed through an extensive network of power lines extending for 32,000 kilometers (20,000 miles).
On April 28, 2025, the company announced that it had discovered unauthorized access into certain parts of its network and servers supporting its business.
Although there was no impact on the company's electricity production and distribution, the incident response efforts disrupted internal operations.
Further investigations revealed on May 1, 2025, that customer information might have been stolen. An update published yesterday confirmed this previous finding, specifying the following data was exposed:
- Full name
- Phone number
- Email address
- Mailing and service addresses
- Nova Scotia Power program participation information
- Date of birth
- Customer account history (power consumption, service requests, customer payment, billing, credit history, and customer correspondence)
- Driver's license number
- Social Insurance Number
- Bank account numbers (for some customers)
